This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
File:                     m9upUpCphaaXdj0wq0L5w3hAeLI.mft (raw, json)
Hash identifier:          zEx79JuCJ0V6qUGovQ/zBVCQ1ICvdgNjJPWdLYeE5IU=
Subject key identifier:   6F:6A:C7:01:83:3A:77:E4:F9:CD:76:00:1C:E4:3D:7B:8B:96:D4:0E
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Certificate issuer:       /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial:       019B5D8958302CA6B4CE8729D061A1F5E8D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
Manifest number:          0E14
Signing time:             Sat 27 Dec 2025 02:00:40 +0000
Manifest this update:     Sat 27 Dec 2025 02:00:40 +0000
Manifest next update:     Sun 28 Dec 2025 02:00:40 +0000
Files and hashes:         1: CYD_Z2qF6mHZ92tY0ftxYfveSAQ.roa (hash: IVgjWp28wTnlbtVuEQ1FT4HkeEGAz5yGW6fM8IpM3RI=)
                          2: m9upUpCphaaXdj0wq0L5w3hAeLI.crl (hash: WxtP+MBi4MfJT4JfETot4KhnkFBKeds/3mn2Bvli1lE=)
                          3: tLilW5BDEJTEzIEDh8KmIyaiPZU.roa (hash: vFC4JGd2bQPNjS7TqFQa5G/kgv43UH1kGodWdHda2yA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5d:89:58:30:2c:a6:b4:ce:87:29:d0:61:a1:f5:e8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
        Validity
            Not Before: Dec 27 02:00:40 2025 GMT
            Not After : Dec 28 02:00:40 2025 GMT
        Subject: CN=6f6ac701833a77e4f9cd76001ce43d7b8b96d40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a6:8e:8e:f5:4a:d0:7e:fc:36:b2:0c:17:a2:
                    a6:5d:48:6f:7e:be:9c:74:19:2e:88:e1:ae:19:46:
                    6d:8e:aa:d4:ed:de:13:c3:3f:88:9c:3b:57:17:f3:
                    f2:a4:48:06:e3:8b:e5:81:35:e4:18:e4:24:8d:08:
                    4e:e8:ea:0b:d1:85:20:16:b0:70:e8:d9:80:6f:94:
                    2e:f3:8c:39:2d:7a:d1:f7:80:c2:4f:a6:af:1f:11:
                    d8:a4:9c:c8:c9:77:78:35:73:c7:58:9f:3d:60:18:
                    36:fd:5f:91:30:be:87:e5:1e:bf:db:81:92:3c:4c:
                    47:c6:54:ff:36:97:02:49:a7:91:4d:3f:59:be:b3:
                    31:c1:4a:c1:2b:23:c4:52:01:da:af:ac:54:4c:b8:
                    79:e1:cd:75:72:6b:a1:62:5d:9f:36:40:60:09:c7:
                    9c:0e:2b:7b:5c:5f:d2:65:e1:34:17:ad:e1:e4:f4:
                    3a:a0:2d:07:0e:04:0a:a5:dc:c1:d4:0a:12:7d:ec:
                    ae:08:ea:0a:dd:e0:e9:93:08:d9:a1:c9:95:b6:a0:
                    0c:be:e7:5a:7f:05:bb:53:1a:90:fd:9b:a6:2a:e5:
                    2e:6f:bb:29:cd:fa:3f:d5:be:1e:bf:2f:1d:3a:b2:
                    a6:bb:38:d2:5f:23:9b:6c:17:db:3f:f8:90:96:31:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6A:C7:01:83:3A:77:E4:F9:CD:76:00:1C:E4:3D:7B:8B:96:D4:0E
            X509v3 Authority Key Identifier:
                keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:84:f1:3e:b2:ae:3d:47:5a:1c:d3:37:a5:d0:d5:e5:a3:ec:
         e6:e3:94:c8:85:e6:af:21:4a:13:99:bf:e9:54:8f:0f:40:dd:
         3e:3f:d5:35:87:f8:c5:80:85:d6:a7:aa:34:e3:27:12:1b:5d:
         4d:2a:76:f8:4e:0e:0f:85:bf:41:a0:79:16:3b:74:ef:b8:3d:
         b7:60:a3:87:84:c6:02:30:ff:51:30:a5:bf:ed:9e:44:67:de:
         d1:82:ba:67:55:74:3a:9c:cf:fa:02:04:38:ae:b0:59:1d:86:
         b6:53:2c:43:6e:cc:79:46:d0:ca:0f:49:ce:f5:03:29:d2:28:
         7d:52:60:7d:59:ac:c1:31:6d:92:6a:bb:b3:c0:e0:4e:07:45:
         a9:60:fd:03:8f:9e:48:79:59:04:83:69:23:a1:5c:62:b5:fb:
         43:46:35:18:0f:9e:64:8a:38:82:5d:d7:15:38:c0:a0:2b:94:
         38:d2:da:f7:78:46:20:a4:27:98:44:db:31:d2:87:ca:16:14:
         e3:c2:08:2b:a9:56:f9:89:99:5d:80:ae:96:c5:1f:45:5f:3a:
         54:8c:97:91:53:74:73:bf:80:12:ce:f4:3b:a1:55:d4:49:dd:
         5e:87:ae:dd:7a:37:be:ba:66:e4:d7:69:20:50:e7:56:51:9d:
         14:8c:62:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 07:23:24 2025 by rpki-client